Author: markt Revision: 1408044 Modified property: svn:log Modified: svn:log at Fri May 10 08:38:26 2013 ------------------------------------------------------------------------------ --- svn:log (original) +++ svn:log Fri May 10 08:38:26 2013 @@ -1,3 +1,4 @@ +This is the fix for CVE-2013-2067 Merged revision 1408043 from tomcat/trunk: In FormAuthenticator: If it is configured to change Session IDs, do the change before displaying the login form.
--------------------------------------------------------------------- To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org For additional commands, e-mail: dev-h...@tomcat.apache.org